359 matches found
CVE-2007-2670
PHPChain 1.0 and earlier allows remote attackers to obtain the installation path via invalid values of the catid parameter to 1 settings.php or 2 cat.php, as demonstrated by XSS manipulations...
Sql injection
SQL injection vulnerability in default.asp in ActiveWebSoftwares Active Auction Pro 7.1 allows remote attackers to execute arbitrary SQL commands via the catid parameter...
Sql injection
SQL injection vulnerability in default.asp in Active Trade 2 allows remote attackers to execute arbitrary SQL commands via the catid parameter...
CVE-2007-1705
SQL injection vulnerability in default.asp in Active Trade 2 allows remote attackers to execute arbitrary SQL commands via the catid parameter...
CVE-2007-1705
CVE-2007-1705 describes an SQL injection in default.asp of Active Trade 2, exploitable via the catid parameter. The vulnerability allows remote attackers to execute arbitrary SQL commands. Affected software and exact file: default.asp (Active Trade 2). Underlying cause stated: unsafely handling t...
CVE-2007-1705
SQL injection vulnerability in default.asp in Active Trade 2 allows remote attackers to execute arbitrary SQL commands via the catid parameter...
CVE-2007-1712: Undefined Security Weakness
SQL injection vulnerability in default.asp in ActiveWebSoftwares Active Auction Pro 7.1 allows remote attackers to execute arbitrary SQL commands via the catid parameter...
CVE-2007-1630
SQL injection vulnerability in default.asp in ActiveWebSoftwares Active Link Engine allows remote attackers to execute arbitrary SQL commands via the catid parameter...
CVE-2007-1629
SQL injection vulnerability in default.asp in ActiveWebSoftwares Active Photo Gallery allows remote attackers to execute arbitrary SQL commands via the catid parameter...
Sql injection
SQL injection vulnerability in default.asp in ActiveWebSoftwares Active Link Engine allows remote attackers to execute arbitrary SQL commands via the catid parameter...
CVE-2007-1629
SQL injection vulnerability in default.asp in ActiveWebSoftwares Active Photo Gallery allows remote attackers to execute arbitrary SQL commands via the catid parameter...
Sql injection
SQL injection vulnerability in index.php in ScriptMagix Recipes 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the catid parameter...
CVE-2007-1615
SQL injection vulnerability in index.php in ScriptMagix Jokes 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the catid parameter...
Sql injection
SQL injection vulnerability in index.php in ScriptMagix FAQ Builder 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the catid parameter...
CVE-2007-1615
SQL injection vulnerability in index.php in ScriptMagix Jokes 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the catid parameter...
CVE-2006-7115
SQL injection vulnerability in PHPKit 1.6.1 RC2 allows remote attackers to inject arbitrary SQL commands via the catid parameter to include.php when the path parameter is set to faq/faq.php, and other unspecified vectors involving guestbook/print.php...
CVE-2007-0631
SQL injection vulnerability in index.php in Eclectic Designs CascadianFAQ 4.1 and earlier allows remote attackers to execute arbitrary SQL commands via the catid parameter...
Sql injection
SQL injection vulnerability in models/category.php in the Weblinks component for Joomla! SVN 20070118 comweblinks allows remote attackers to execute arbitrary SQL commands via the catid parameter...
CVE-2007-0387
SQL injection vulnerability in models/category.php in the Weblinks component for Joomla! SVN 20070118 comweblinks allows remote attackers to execute arbitrary SQL commands via the catid parameter...